AWS Elasticache复述,集群配置

Question

我对地形有点陌生，需要一些帮助来解决这个问题。它创建了相应的资源，但当连接到端点时，我得到一个超时。我注意到安全组实际上并没有被创建，但我不知道为什么。如有任何帮助，不胜感激。

配置:

provider "aws" {
region = "us-west-2"
}
resource "aws_elasticache_cluster" "example" {
cluster_id           = "cluster-example"
engine               = "redis"
node_type            = "cache.m4.large"
num_cache_nodes      = 1
parameter_group_name = "default.redis3.2"
engine_version       = "3.2.10"
port                 = 6379
}
resource "aws_security_group" "example" {
name        = "example"
description = "Used by the example Redis cluster"
vpc_id      = "${aws_vpc.example.id}"
ingress {
description      = "TLS from VPC"
from_port        = 443
to_port          = 443
protocol         = "tcp"
cidr_blocks      = [aws_vpc.example.cidr_block]
}
egress {
from_port        = 0
to_port          = 0
protocol         = "-1"
cidr_blocks      = ["0.0.0.0/0"]
ipv6_cidr_blocks = ["::/0"]
}
}
resource "aws_vpc" "example" {
cidr_block = "10.0.0.0/16"
tags = {
Name = "example"
}
}
resource "aws_subnet" "example" {
vpc_id     = "${aws_vpc.example.id}"
cidr_block = "10.0.0.0/20"
tags = {
Name = "example"
}
}
resource "aws_elasticache_subnet_group" "example" {
name        = "example"
description = "Example subnet group"
subnet_ids  = ["${aws_subnet.example.id}"]
}

连接到端点:

import os
import redis
ENDPOINT = os.environ.get('REDIS_HOST')
client = redis.Redis(host=ENDPOINT, port=6379, db=0)
client.ping()

(无密码集群)

编辑:我在本地机器上用python调用端点。

Answer 1

您不能直接从AWS外部访问EC集群，因为它只能从VPC访问。如果您想从您的家庭网络连接，您必须使用VPN, Direct Connect或SSH隧道。